> For the complete documentation index, see [llms.txt](https://cheatsheet.laet4x.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cheatsheet.laet4x.com/readme.md).

# README

A personal reference for penetration testing and CTF work — commands, tools, and methodology, organized so the right page is a couple of clicks away mid-engagement or mid-challenge.

## Pentest

Methodology and tooling for authorized security engagements: [Reconnaissance](/pentest/reconnaissance.md), [Network Scanning and Enumeration](/pentest/network-scanning-and-enumeration.md), [Methodology & Report Writing](/pentest/methodology-and-report-writing.md), [Active Directory](/pentest/active-directory.md), [Web Application Pentest](/pentest/web.md), [API Pentest](/pentest/api-pentest.md), [AI / LLM Security Testing](/pentest/ai.md), [Host-Based Privilege Escalation](/pentest/privilege-escalation.md), [Pivoting & Tunneling](/pentest/pivoting-and-tunneling.md), [Password Attacks & Cracking](/pentest/password-attacks-and-cracking.md), [Exploit Development](/pentest/exploit-development.md), [Wireless Pentest](/pentest/wireless-pentest.md), [Mobile Application Pentest](/pentest/mobile-application-pentest.md), and [Cloud Pentest](/pentest/cloud-pentest.md).

## Blue Team

Defensive security references for SOC, IR, and detection work: [Getting Started](/blue-team/blueteam.md), [Threat Intelligence](/blue-team/threat-intelligence.md), [Threat Hunting](/blue-team/threat-hunting.md), [Detection Engineering](/blue-team/detection-engineering.md), [SIEM & Log Analysis](/blue-team/siem-and-log-analysis.md), [DFIR](/blue-team/dfir.md), [Malware Analysis](/blue-team/malware-analysis.md), [Network Security Monitoring](/blue-team/network-security-monitoring.md), and [Purple Team & Hardening](/blue-team/purple-team-and-hardening.md).

## CTF

Category cheatsheets for challenge solving: [Getting Started](/ctf/ctf.md), [Web Exploitation](/ctf/web-exploitation.md), [Binary Exploitation (Pwn)](/ctf/binary-exploitation.md), [Reverse Engineering](/ctf/reverse-engineering.md), [Cryptography](/ctf/cryptography.md), [Forensics & Steganography](/ctf/forensics-and-steganography.md), [OSINT & Misc](/ctf/osint-and-misc.md), and [AI & Prompt Injection](/ctf/ai-and-prompt-injection.md).

See [SUMMARY.md](https://github.com/fr4nc1stein/cheatsheet/tree/main/SUMMARY.md) for the full table of contents.